Third-Party Risk Analyst, AI-Driven Security

CV in; Northern (KY); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Equity

Benefits package

401(k)

Job summary

Plaid is seeking a Security Analyst in Third-Party Ecosystem Risk Management to safeguard our interconnected digital landscape. You will oversee security risk assessments for Plaid's third parties from initiation to closure, evaluating vendors, customers, and partners with consistent rigor.

You will mature the program by refining questionnaires, tiering criteria, intake processes, and runbooks while leveraging AI tools to boost throughput.

Qualifications

• 4+ years of vendor risk management experience.
• Experience reviewing SOC 2 and ISO 27001 reports and security docs.
• Understanding of third-party risk lifecycle including intake, tiering, exceptions, and remediation.
• Strong analytical and documentation skills to produce clear risk findings and justified decisions.
• Ability to communicate risk to Procurement, Legal, and GTM teams.

Responsibilities

• Oversee security risk assessments for third parties from initiation to closure.
• Triage vendor requests and conduct security reviews by risk tier.
• Document findings, exceptions, and remediation plans for leadership and partners.
• Mature the program by refining questionnaires, tiering, intake processes, and runbooks.
• Report program health and risk posture to stakeholders.

Skills

Vendor risk management

Security assessments

SOC 2

ISO 27001

AI tooling

Tools

Jira

ServiceNow

OneTrust

MetricStream

Archer

Qualys

Job description

Plaid is seeking a Security Analyst in Third-Party Ecosystem Risk Management to safeguard our interconnected digital landscape. You will oversee security risk assessments for Plaid's third parties from initiation to closure, evaluating vendors, customers, and partners with consistent rigor.

You will mature the program by refining questionnaires, tiering criteria, intake processes, and runbooks while leveraging AI tools to boost throughput.